Static task
static1
Behavioral task
behavioral1
Sample
ad91abe79588aac17bb98e22ccb44606_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad91abe79588aac17bb98e22ccb44606_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad91abe79588aac17bb98e22ccb44606_JaffaCakes118
-
Size
77KB
-
MD5
ad91abe79588aac17bb98e22ccb44606
-
SHA1
74652ceed7eb71eaba105fb263a89ea5479c707e
-
SHA256
d6df7ae69375fdda0fce40e220cae8b62817db6ef65464de6b3f6ee810b7ef98
-
SHA512
314ad8d75ba59affbf27c1c80fe137c6f0b052aa04201b3fd3b2a5d1882789d3ddd9b2f866a0f49a0ec32cb9cef3a865af67a577cffadf0079efb240f4b019c9
-
SSDEEP
1536:fZQ3qrRlz06wQVirlPzsA0QIjibxp5iXlMcyvabEmrjggxdMnR1z83/n3:i3qL06RqxoumMxLiX2RVEyz8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad91abe79588aac17bb98e22ccb44606_JaffaCakes118
Files
-
ad91abe79588aac17bb98e22ccb44606_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j8.b78ws Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6dnn4fh4 Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE